mirror of
https://github.com/johndoe6345789/metabuilder.git
synced 2026-04-26 14:54:55 +00:00
6313f0ea24
- Fix workflow file path references (ci.yml -> ci/ci.yml) - Add validate-workflows.py for YAML syntax and structure validation - Add simulate-workflows.sh for local job simulation without act - Pin dependency-check action to specific SHA for security - Update npm scripts with validation and simulation commands - Add comprehensive workflow simulation documentation Co-authored-by: johndoe6345789 <224850594+johndoe6345789@users.noreply.github.com>
667 lines
20 KiB
YAML
667 lines
20 KiB
YAML
name: Comprehensive Quality Metrics
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [ main, master, develop ]
|
|
push:
|
|
branches: [ main, master ]
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: quality-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
# ============================================================================
|
|
# CODE QUALITY METRICS
|
|
# ============================================================================
|
|
code-quality:
|
|
name: Code Quality Analysis
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Generate Prisma Client
|
|
run: bun run db:generate
|
|
env:
|
|
DATABASE_URL: file:./dev.db
|
|
|
|
# Cyclomatic Complexity
|
|
- name: Check code complexity
|
|
id: complexity
|
|
run: |
|
|
bun install --dev --no-save ts-morph @swc/core
|
|
bunx tsx ../../tools/check-code-complexity.ts > complexity-report.json
|
|
cat complexity-report.json
|
|
continue-on-error: true
|
|
|
|
# Function metrics
|
|
- name: Analyze function metrics
|
|
id: metrics
|
|
run: bunx tsx ../../tools/analyze-function-metrics.ts > function-metrics.json
|
|
continue-on-error: true
|
|
|
|
# Maintainability Index
|
|
- name: Calculate maintainability index
|
|
id: maintainability
|
|
run: bunx tsx ../../tools/check-maintainability.ts > maintainability-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Detect stub implementations
|
|
id: stub-detection
|
|
run: bunx tsx ../../tools/detect-stub-implementations.ts > stub-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Upload quality reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: code-quality-reports
|
|
path: |
|
|
frontends/nextjs/complexity-report.json
|
|
frontends/nextjs/function-metrics.json
|
|
frontends/nextjs/maintainability-report.json
|
|
frontends/nextjs/stub-report.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# TEST COVERAGE METRICS
|
|
# ============================================================================
|
|
coverage-metrics:
|
|
name: Test Coverage Analysis
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Generate Prisma Client
|
|
run: bun run db:generate
|
|
env:
|
|
DATABASE_URL: file:./dev.db
|
|
|
|
- name: Run tests with coverage
|
|
run: bun run test:unit:coverage
|
|
env:
|
|
DATABASE_URL: file:./dev.db
|
|
continue-on-error: true
|
|
|
|
- name: Generate coverage report
|
|
run: bun run test:coverage:report
|
|
continue-on-error: true
|
|
|
|
- name: Check function test coverage
|
|
id: function-coverage
|
|
run: bun run test:check-functions > function-coverage.txt 2>&1
|
|
continue-on-error: true
|
|
|
|
- name: Extract coverage metrics
|
|
id: coverage-extract
|
|
run: bunx tsx ../../tools/extract-coverage-metrics.ts
|
|
continue-on-error: true
|
|
|
|
- name: Upload coverage artifacts
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: coverage-reports
|
|
path: |
|
|
frontends/nextjs/coverage/
|
|
frontends/nextjs/FUNCTION_TEST_COVERAGE.md
|
|
frontends/nextjs/function-coverage.txt
|
|
frontends/nextjs/coverage-metrics.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# SECURITY SCANNING
|
|
# ============================================================================
|
|
security-scan:
|
|
name: Security Vulnerability Scan
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
permissions:
|
|
contents: read
|
|
security-events: write
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
# Npm audit for dependencies
|
|
- name: NPM Security Audit
|
|
id: npm-audit
|
|
run: |
|
|
bun audit --json > npm-audit.json || true
|
|
bunx tsx ../../tools/parse-npm-audit.ts
|
|
continue-on-error: true
|
|
|
|
# Check for security anti-patterns
|
|
- name: Scan for security issues
|
|
id: security-scan
|
|
run: bunx tsx ../../tools/security-scanner.ts > security-report.json
|
|
continue-on-error: true
|
|
|
|
# OWASP Dependency Check (if configured)
|
|
- name: Run dependency check
|
|
uses: dependency-check/Dependency-Check_Action@1e54355a8b4c8abaa8cc7d0b70aa655a3bb15a6c # main
|
|
with:
|
|
path: '.'
|
|
format: 'JSON'
|
|
args: >
|
|
--scan .
|
|
--exclude node_modules
|
|
--exclude build
|
|
--exclude .git
|
|
--exclude dbal/cpp/build
|
|
continue-on-error: true
|
|
|
|
- name: Upload security reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: security-reports
|
|
path: |
|
|
frontends/nextjs/npm-audit.json
|
|
frontends/nextjs/security-report.json
|
|
dependency-check-report.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# DOCUMENTATION QUALITY
|
|
# ============================================================================
|
|
documentation-quality:
|
|
name: Documentation Coverage & Quality
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Check JSDoc coverage
|
|
id: jsdoc
|
|
run: bunx tsx ../../tools/check-jsdoc-coverage.ts > jsdoc-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Validate README files
|
|
id: readme
|
|
run: bunx tsx ../../tools/validate-readme-quality.ts > readme-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Validate markdown links
|
|
id: markdown-links
|
|
run: bunx tsx ../../tools/validate-markdown-links.ts > markdown-links-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Check API documentation
|
|
id: api-docs
|
|
run: bunx tsx ../../tools/validate-api-docs.ts > api-docs-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Verify code examples
|
|
id: code-examples
|
|
run: bunx tsx ../../tools/validate-code-examples.ts > code-examples-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Upload documentation reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: documentation-reports
|
|
path: |
|
|
frontends/nextjs/jsdoc-report.json
|
|
frontends/nextjs/readme-report.json
|
|
frontends/nextjs/markdown-links-report.json
|
|
frontends/nextjs/api-docs-report.json
|
|
frontends/nextjs/code-examples-report.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# PERFORMANCE METRICS
|
|
# ============================================================================
|
|
performance-metrics:
|
|
name: Performance Analysis
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Generate Prisma Client
|
|
run: bun run db:generate
|
|
env:
|
|
DATABASE_URL: file:./dev.db
|
|
|
|
- name: Build application
|
|
run: bun run build
|
|
env:
|
|
DATABASE_URL: file:./dev.db
|
|
|
|
- name: Analyze bundle size
|
|
id: bundle
|
|
run: bunx tsx ../../tools/analyze-bundle-size.ts > bundle-analysis.json
|
|
continue-on-error: true
|
|
|
|
- name: Check performance budget
|
|
id: perf-budget
|
|
run: bunx tsx ../../tools/check-performance-budget.ts > performance-budget.json
|
|
continue-on-error: true
|
|
|
|
- name: Lighthouse audit
|
|
id: lighthouse
|
|
run: bunx tsx ../../tools/run-lighthouse-audit.ts > lighthouse-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Analyze render performance
|
|
id: render-perf
|
|
run: bunx tsx ../../tools/analyze-render-performance.ts > render-performance.json
|
|
continue-on-error: true
|
|
|
|
- name: Upload performance reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: performance-reports
|
|
path: |
|
|
frontends/nextjs/bundle-analysis.json
|
|
frontends/nextjs/performance-budget.json
|
|
frontends/nextjs/lighthouse-report.json
|
|
frontends/nextjs/render-performance.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# SIZE & STRUCTURE METRICS
|
|
# ============================================================================
|
|
size-metrics:
|
|
name: File Size & Architecture Analysis
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Check source file sizes
|
|
id: file-sizes
|
|
run: bunx tsx ../../tools/check-file-sizes.ts > file-sizes-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Analyze directory structure
|
|
id: dir-structure
|
|
run: bunx tsx ../../tools/analyze-directory-structure.ts > directory-structure.json
|
|
continue-on-error: true
|
|
|
|
- name: Check for code duplication
|
|
id: duplication
|
|
run: bunx tsx ../../tools/detect-code-duplication.ts > duplication-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Analyze import chains
|
|
id: imports
|
|
run: bunx tsx ../../tools/analyze-import-chains.ts > import-analysis.json
|
|
continue-on-error: true
|
|
|
|
- name: Upload size reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: size-reports
|
|
path: |
|
|
frontends/nextjs/file-sizes-report.json
|
|
frontends/nextjs/directory-structure.json
|
|
frontends/nextjs/duplication-report.json
|
|
frontends/nextjs/import-analysis.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# DEPENDENCY ANALYSIS
|
|
# ============================================================================
|
|
dependency-analysis:
|
|
name: Dependency Health Check
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Check outdated dependencies
|
|
id: outdated
|
|
run: bun outdated --json > outdated-deps.json || true
|
|
continue-on-error: true
|
|
|
|
- name: License compliance check
|
|
id: licenses
|
|
run: bunx tsx ../../tools/check-license-compliance.ts > license-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Analyze dependency tree
|
|
id: tree
|
|
run: bunx tsx ../../tools/analyze-dependency-tree.ts > dependency-tree.json
|
|
continue-on-error: true
|
|
|
|
- name: Check for circular dependencies
|
|
id: circular
|
|
run: bunx tsx ../../tools/detect-circular-dependencies.ts > circular-deps.json
|
|
continue-on-error: true
|
|
|
|
- name: Upload dependency reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: dependency-reports
|
|
path: |
|
|
frontends/nextjs/outdated-deps.json
|
|
frontends/nextjs/license-report.json
|
|
frontends/nextjs/dependency-tree.json
|
|
frontends/nextjs/circular-deps.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# TYPE SAFETY & LINTING
|
|
# ============================================================================
|
|
type-and-lint-metrics:
|
|
name: Type Safety & Code Style Metrics
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Generate Prisma Client
|
|
run: bun run db:generate
|
|
env:
|
|
DATABASE_URL: file:./dev.db
|
|
|
|
- name: TypeScript strict check
|
|
id: ts-strict
|
|
run: bunx tsx ../../tools/check-typescript-strict.ts > ts-strict-report.json
|
|
continue-on-error: true
|
|
|
|
- name: ESLint detailed report
|
|
id: eslint
|
|
run: |
|
|
bunx eslint . --format json > eslint-report.json || true
|
|
bunx tsx ../../tools/parse-eslint-report.ts
|
|
continue-on-error: true
|
|
|
|
- name: Check for @ts-ignore usage
|
|
id: ts-ignore
|
|
run: bunx tsx ../../tools/find-ts-ignores.ts > ts-ignore-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Check for any types
|
|
id: any-types
|
|
run: bunx tsx ../../tools/find-any-types.ts > any-types-report.json
|
|
continue-on-error: true
|
|
|
|
- name: Upload type reports
|
|
uses: actions/upload-artifact@v4
|
|
if: always()
|
|
with:
|
|
name: type-reports
|
|
path: |
|
|
frontends/nextjs/ts-strict-report.json
|
|
frontends/nextjs/eslint-report.json
|
|
frontends/nextjs/ts-ignore-report.json
|
|
frontends/nextjs/any-types-report.json
|
|
retention-days: 30
|
|
|
|
# ============================================================================
|
|
# QUALITY SUMMARY & REPORTING
|
|
# ============================================================================
|
|
quality-summary:
|
|
name: Quality Metrics Summary
|
|
runs-on: ubuntu-latest
|
|
needs: [
|
|
code-quality,
|
|
coverage-metrics,
|
|
security-scan,
|
|
documentation-quality,
|
|
performance-metrics,
|
|
size-metrics,
|
|
dependency-analysis,
|
|
type-and-lint-metrics
|
|
]
|
|
if: always()
|
|
defaults:
|
|
run:
|
|
working-directory: frontends/nextjs
|
|
permissions:
|
|
checks: write
|
|
pull-requests: write
|
|
contents: read
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: '1.3.4'
|
|
|
|
- name: Cache Bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
key: bun-deps-${{ runner.os }}-${{ hashFiles('bun.lock') }}
|
|
path: |
|
|
frontends/nextjs/node_modules
|
|
~/.bun
|
|
restore-keys: bun-deps-${{ runner.os }}-
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Download all reports
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: quality-reports/
|
|
|
|
- name: Generate quality summary
|
|
id: summary
|
|
run: bunx tsx ../../tools/generate-quality-summary.ts > quality-summary.md
|
|
continue-on-error: true
|
|
|
|
- name: Post summary as PR comment
|
|
if: github.event_name == 'pull_request'
|
|
uses: actions/github-script@v7
|
|
with:
|
|
script: |
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
|
|
let summaryContent = '';
|
|
const summaryPath = 'frontends/nextjs/quality-summary.md';
|
|
if (fs.existsSync(summaryPath)) {
|
|
summaryContent = fs.readFileSync(summaryPath, 'utf8');
|
|
}
|
|
|
|
const comment = `## 📊 Quality Metrics Report\n\n${summaryContent}\n\n<details><summary>📁 Full Reports (click to expand)</summary>\n\nAll detailed reports are available as build artifacts.\n</details>`;
|
|
|
|
github.rest.issues.createComment({
|
|
issue_number: context.issue.number,
|
|
owner: context.repo.owner,
|
|
repo: context.repo.repo,
|
|
body: comment
|
|
});
|
|
|
|
- name: Create check run with summary
|
|
uses: actions/github-script@v7
|
|
if: github.event_name == 'pull_request'
|
|
with:
|
|
script: |
|
|
const fs = require('fs');
|
|
const summaryPath = 'frontends/nextjs/quality-summary.md';
|
|
const summary = fs.existsSync(summaryPath)
|
|
? fs.readFileSync(summaryPath, 'utf8')
|
|
: 'Quality metrics report generated.';
|
|
|
|
github.rest.checks.create({
|
|
owner: context.repo.owner,
|
|
repo: context.repo.repo,
|
|
name: 'Quality Metrics',
|
|
head_sha: context.payload.pull_request.head.sha,
|
|
status: 'completed',
|
|
conclusion: 'success',
|
|
summary: 'All quality metrics collected',
|
|
text: summary
|
|
});
|